Add the following lines to "/opt/glassfish3/glassfish/domains/domain1/config/default-web.xml" and don't forget to fill in the "preauth.username" and "preauth.password" with the Active Directory(AD) lookup-user credentials!